Skip to main content

Snowflake Jdbc CVE-2024-43382

MEDIUM
Inadequate Encryption Strength (CWE-326)
2024-10-30 cve@mitre.org
Information Disclosure Snowflake Jdbc
5.9
CVSS 3.1 · Vendor: mitre
Share

Severity by source

Vendor (mitre) PRIMARY
5.9 MEDIUM
AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
Attack Vector
Network
Attack Complexity
High
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None

Lifecycle Timeline

1
CVE Published
Oct 30, 2024 - 21:15 cve.org
MEDIUM 5.9

Blast Radius

ecosystem impact
† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth
  • 2 maven packages depend on net.snowflake:snowflake-jdbc (2 direct, 0 indirect)

Ecosystem-wide dependent count for version 3.2.6.

DescriptionCVE.org

Snowflake JDBC driver versions >= 3.2.6 and <= 3.19.1 have an Incorrect Security Setting that can result in data being uploaded to an encrypted stage without the additional layer of protection provided by client side encryption.

AnalysisAI

Snowflake JDBC driver versions >= 3.2.6 and <= 3.19.1 have an Incorrect Security Setting that can result in data being uploaded to an encrypted stage without the additional layer of protection. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-326. Snowflake JDBC driver versions >= 3.2.6 and <= 3.19.1 have an Incorrect Security Setting that can result in data being uploaded to an encrypted stage without the additional layer of protection provided by client side encryption. Affected products include: Snowflake Snowflake Jdbc.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Snowflake Jdbc

View all
CVE-2023-30535 HIGH
8.8 Apr 14

Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowf
CVE-2025-27496 LOW
3.3 Mar 13

Snowflake, a platform for using artificial intelligence in the context of cloud computing, has a vulnerability in the Sn
CVE-2025-24790 MEDIUM
4.4 Jan 29

Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowf
CVE-2025-24789 HIGH
7.8 Jan 29

Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowf

Same weakness CWE-326 – Inadequate Encryption Strength

View all
CVE-2017-1000486 CRITICAL POC
9.8
CVE-2017-11317 CRITICAL POC
9.8
CVE-2014-0224 HIGH POC
7.4
CVE-2013-2566 MEDIUM POC
5.9
CVE-2021-42216 CRITICAL POC
9.8
CVE-2017-8076 CRITICAL POC
9.8
CVE-2017-7888 CRITICAL POC
9.8
CVE-2018-25272 CRITICAL POC
9.3

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2024-43382 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy